# Vulnerabilities published in 2025


- [MAL-2025-5961](https://insights.sbomify.com/MAL-2025-5961/): Malicious code in telegram-pk-auto-sender (npm) (malicious package)
- [MAL-2025-59609](https://insights.sbomify.com/MAL-2025-59609/): Malicious code in yanti-ikan52-sukiwir (npm) (malicious package)
- [MAL-2025-59608](https://insights.sbomify.com/MAL-2025-59608/): Malicious code in yanti-gulai94-sukiwir (npm) (malicious package)
- [MAL-2025-59607](https://insights.sbomify.com/MAL-2025-59607/): Malicious code in yanti-gulai27-sukiwir (npm) (malicious package)
- [MAL-2025-59606](https://insights.sbomify.com/MAL-2025-59606/): Malicious code in yanti-getuk9-sukiwir (npm) (malicious package)
- [MAL-2025-59605](https://insights.sbomify.com/MAL-2025-59605/): Malicious code in yanti-gepuk54-sukiwir (npm) (malicious package)
- [MAL-2025-59604](https://insights.sbomify.com/MAL-2025-59604/): Malicious code in yanti-gaplek88-sukiwir (npm) (malicious package)
- [MAL-2025-59603](https://insights.sbomify.com/MAL-2025-59603/): Malicious code in yanti-gado-gado28-sukiwir (npm) (malicious package)
- [MAL-2025-59602](https://insights.sbomify.com/MAL-2025-59602/): Malicious code in yanti-esdoger89-sukiwir (npm) (malicious package)
- [MAL-2025-59601](https://insights.sbomify.com/MAL-2025-59601/): Malicious code in yanti-esdoger68-sukiwir (npm) (malicious package)
- [MAL-2025-59600](https://insights.sbomify.com/MAL-2025-59600/): Malicious code in yanti-enting76-sukiwir (npm) (malicious package)
- [MAL-2025-5960](https://insights.sbomify.com/MAL-2025-5960/): Malicious code in tailwind-config-plugin (npm) (malicious package)
- [MAL-2025-596](https://insights.sbomify.com/MAL-2025-596/): Malicious code in home-assignment (npm) (malicious package)
- [MAL-2025-59599](https://insights.sbomify.com/MAL-2025-59599/): Malicious code in yanti-enting52-sukiwir (npm) (malicious package)
- [MAL-2025-59598](https://insights.sbomify.com/MAL-2025-59598/): Malicious code in yanti-empal73-sukiwir (npm) (malicious package)
- [MAL-2025-59597](https://insights.sbomify.com/MAL-2025-59597/): Malicious code in yanti-bubursumsum93-sukiwir (npm) (malicious package)
- [MAL-2025-59596](https://insights.sbomify.com/MAL-2025-59596/): Malicious code in yanti-brongkos58-sukiwir (npm) (malicious package)
- [MAL-2025-59595](https://insights.sbomify.com/MAL-2025-59595/): Malicious code in yanti-brengkes44-sukiwir (npm) (malicious package)
- [MAL-2025-59594](https://insights.sbomify.com/MAL-2025-59594/): Malicious code in yanti-botok74-sukiwir (npm) (malicious package)
- [MAL-2025-59593](https://insights.sbomify.com/MAL-2025-59593/): Malicious code in yanti-bakwan44-sukiwir (npm) (malicious package)
- [MAL-2025-59592](https://insights.sbomify.com/MAL-2025-59592/): Malicious code in yanti-asinan2-sukiwir (npm) (malicious package)
- [MAL-2025-59591](https://insights.sbomify.com/MAL-2025-59591/): Malicious code in yanti-asinan18-sukiwir (npm) (malicious package)
- [MAL-2025-59590](https://insights.sbomify.com/MAL-2025-59590/): Malicious code in yammering_manatee_z3n (npm) (malicious package)
- [MAL-2025-5959](https://insights.sbomify.com/MAL-2025-5959/): Malicious code in tailwind-base-theme (npm) (malicious package)
- [MAL-2025-59589](https://insights.sbomify.com/MAL-2025-59589/): Malicious code in yammering_hookworm_z3n (npm) (malicious package)
- [MAL-2025-59588](https://insights.sbomify.com/MAL-2025-59588/): Malicious code in yabbering_crow_z3n (npm) (malicious package)
- [MAL-2025-59587](https://insights.sbomify.com/MAL-2025-59587/): Malicious code in xenial_fly_z3n (npm) (malicious package)
- [MAL-2025-59586](https://insights.sbomify.com/MAL-2025-59586/): Malicious code in xaver-wajit51-sukiwir (npm) (malicious package)
- [MAL-2025-59585](https://insights.sbomify.com/MAL-2025-59585/): Malicious code in xaver-tiwul91-sukiwir (npm) (malicious package)
- [MAL-2025-59584](https://insights.sbomify.com/MAL-2025-59584/): Malicious code in xaver-tempe52-sukiwir (npm) (malicious package)
- [MAL-2025-59583](https://insights.sbomify.com/MAL-2025-59583/): Malicious code in xaver-tempe37-sukiwir (npm) (malicious package)
- [MAL-2025-59582](https://insights.sbomify.com/MAL-2025-59582/): Malicious code in xaver-tek23-sukiwir (npm) (malicious package)
- [MAL-2025-59581](https://insights.sbomify.com/MAL-2025-59581/): Malicious code in xaver-sroto90-sukiwir (npm) (malicious package)
- [MAL-2025-59580](https://insights.sbomify.com/MAL-2025-59580/): Malicious code in xaver-sroto85-sukiwir (npm) (malicious package)
- [MAL-2025-5958](https://insights.sbomify.com/MAL-2025-5958/): Malicious code in string-parser-utils (npm) (malicious package)
- [MAL-2025-59579](https://insights.sbomify.com/MAL-2025-59579/): Malicious code in xaver-soto31-sukiwir (npm) (malicious package)
- [MAL-2025-59578](https://insights.sbomify.com/MAL-2025-59578/): Malicious code in xaver-serimuka45-sukiwir (npm) (malicious package)
- [MAL-2025-59577](https://insights.sbomify.com/MAL-2025-59577/): Malicious code in xaver-serimuka1-sukiwir (npm) (malicious package)
- [MAL-2025-59576](https://insights.sbomify.com/MAL-2025-59576/): Malicious code in xaver-sate67-sukiwir (npm) (malicious package)
- [MAL-2025-59575](https://insights.sbomify.com/MAL-2025-59575/): Malicious code in xaver-sate46-sukiwir (npm) (malicious package)
- [MAL-2025-59574](https://insights.sbomify.com/MAL-2025-59574/): Malicious code in xaver-sambel70-sukiwir (npm) (malicious package)
- [MAL-2025-59573](https://insights.sbomify.com/MAL-2025-59573/): Malicious code in xaver-sambel18-sukiwir (npm) (malicious package)
- [MAL-2025-59572](https://insights.sbomify.com/MAL-2025-59572/): Malicious code in xaver-saguer43-sukiwir (npm) (malicious package)
- [MAL-2025-59571](https://insights.sbomify.com/MAL-2025-59571/): Malicious code in xaver-rendang91-sukiwir (npm) (malicious package)
- [MAL-2025-59570](https://insights.sbomify.com/MAL-2025-59570/): Malicious code in xaver-rangi7-sukiwir (npm) (malicious package)
- [MAL-2025-5957](https://insights.sbomify.com/MAL-2025-5957/): Malicious code in square-crypto-utils-internal (npm) (malicious package)
- [MAL-2025-59569](https://insights.sbomify.com/MAL-2025-59569/): Malicious code in xaver-ragi14-sukiwir (npm) (malicious package)
- [MAL-2025-59568](https://insights.sbomify.com/MAL-2025-59568/): Malicious code in xaver-pisang84-sukiwir (npm) (malicious package)
- [MAL-2025-59567](https://insights.sbomify.com/MAL-2025-59567/): Malicious code in xaver-pisang25-sukiwir (npm) (malicious package)
- [MAL-2025-59566](https://insights.sbomify.com/MAL-2025-59566/): Malicious code in xaver-mieayam5-sukiwir (npm) (malicious package)
- [MAL-2025-59565](https://insights.sbomify.com/MAL-2025-59565/): Malicious code in xaver-mendut31-sukiwir (npm) (malicious package)
- [MAL-2025-59564](https://insights.sbomify.com/MAL-2025-59564/): Malicious code in xaver-martabak57-sukiwir (npm) (malicious package)
- [MAL-2025-59563](https://insights.sbomify.com/MAL-2025-59563/): Malicious code in xaver-lupis4-sukiwir (npm) (malicious package)
- [MAL-2025-59562](https://insights.sbomify.com/MAL-2025-59562/): Malicious code in xaver-lumpur93-sukiwir (npm) (malicious package)
- [MAL-2025-59561](https://insights.sbomify.com/MAL-2025-59561/): Malicious code in xaver-lumpur28-sukiwir (npm) (malicious package)
- [MAL-2025-59560](https://insights.sbomify.com/MAL-2025-59560/): Malicious code in xaver-lontong91-sukiwir (npm) (malicious package)
- [MAL-2025-5956](https://insights.sbomify.com/MAL-2025-5956/): Malicious code in shared-workflows (npm) (malicious package)
- [MAL-2025-59559](https://insights.sbomify.com/MAL-2025-59559/): Malicious code in xaver-kue4-sukiwir (npm) (malicious package)
- [MAL-2025-59558](https://insights.sbomify.com/MAL-2025-59558/): Malicious code in xaver-klipo54-sukiwir (npm) (malicious package)
- [MAL-2025-59557](https://insights.sbomify.com/MAL-2025-59557/): Malicious code in xaver-keripik22-sukiwir (npm) (malicious package)
- [MAL-2025-59556](https://insights.sbomify.com/MAL-2025-59556/): Malicious code in xaver-keraktelor5-sukiwir (npm) (malicious package)
- [MAL-2025-59555](https://insights.sbomify.com/MAL-2025-59555/): Malicious code in xaver-gaplek95-sukiwir (npm) (malicious package)
- [MAL-2025-59554](https://insights.sbomify.com/MAL-2025-59554/): Malicious code in xaver-esdoger80-sukiwir (npm) (malicious package)
- [MAL-2025-59553](https://insights.sbomify.com/MAL-2025-59553/): Malicious code in xaver-esdoger30-sukiwir (npm) (malicious package)
- [MAL-2025-59552](https://insights.sbomify.com/MAL-2025-59552/): Malicious code in xaver-enting33-sukiwir (npm) (malicious package)
- [MAL-2025-59551](https://insights.sbomify.com/MAL-2025-59551/): Malicious code in xaver-donat66-sukiwir (npm) (malicious package)
- [MAL-2025-59550](https://insights.sbomify.com/MAL-2025-59550/): Malicious code in xaver-bakwan28-sukiwir (npm) (malicious package)
- [MAL-2025-5955](https://insights.sbomify.com/MAL-2025-5955/): Malicious code in shardeum-json-rpc (npm) (malicious package)
- [MAL-2025-59549](https://insights.sbomify.com/MAL-2025-59549/): Malicious code in xaver-asinan10-sukiwir (npm) (malicious package)
- [MAL-2025-59548](https://insights.sbomify.com/MAL-2025-59548/): Malicious code in worthy_fly_z3n (npm) (malicious package)
- [MAL-2025-59547](https://insights.sbomify.com/MAL-2025-59547/): Malicious code in worthy_crawdad_z3n (npm) (malicious package)
- [MAL-2025-59546](https://insights.sbomify.com/MAL-2025-59546/): Malicious code in worrying_louse_z3n (npm) (malicious package)
- [MAL-2025-59545](https://insights.sbomify.com/MAL-2025-59545/): Malicious code in worrying_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-59544](https://insights.sbomify.com/MAL-2025-59544/): Malicious code in worried_buzzard_z3n (npm) (malicious package)
- [MAL-2025-59543](https://insights.sbomify.com/MAL-2025-59543/): Malicious code in working_zebra_z3n (npm) (malicious package)
- [MAL-2025-59542](https://insights.sbomify.com/MAL-2025-59542/): Malicious code in working_octopus_z3n (npm) (malicious package)
- [MAL-2025-59541](https://insights.sbomify.com/MAL-2025-59541/): Malicious code in wonderful_lamprey_z3n (npm) (malicious package)
- [MAL-2025-59540](https://insights.sbomify.com/MAL-2025-59540/): Malicious code in wittering_pigeon_z3n (npm) (malicious package)
- [MAL-2025-5954](https://insights.sbomify.com/MAL-2025-5954/): Malicious code in sentry-bundler-plugin-dev (npm) (malicious package)
- [MAL-2025-59539](https://insights.sbomify.com/MAL-2025-59539/): Malicious code in wispy_catshark_z3n (npm) (malicious package)
- [MAL-2025-59538](https://insights.sbomify.com/MAL-2025-59538/): Malicious code in wily_lemur_z3n (npm) (malicious package)
- [MAL-2025-59537](https://insights.sbomify.com/MAL-2025-59537/): Malicious code in wily_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-59536](https://insights.sbomify.com/MAL-2025-59536/): Malicious code in willowy_silkworm_z3n (npm) (malicious package)
- [MAL-2025-59535](https://insights.sbomify.com/MAL-2025-59535/): Malicious code in wild_vulture_z3n (npm) (malicious package)
- [MAL-2025-59534](https://insights.sbomify.com/MAL-2025-59534/): Malicious code in wide_wren_z3n (npm) (malicious package)
- [MAL-2025-59533](https://insights.sbomify.com/MAL-2025-59533/): Malicious code in wide_mole_z3n (npm) (malicious package)
- [MAL-2025-59532](https://insights.sbomify.com/MAL-2025-59532/): Malicious code in wicked_llama_z3n (npm) (malicious package)
- [MAL-2025-59531](https://insights.sbomify.com/MAL-2025-59531/): Malicious code in wibowo-tomat9-sukiwir (npm) (malicious package)
- [MAL-2025-59530](https://insights.sbomify.com/MAL-2025-59530/): Malicious code in wibowo-tempe63-sukiwir (npm) (malicious package)
- [MAL-2025-5953](https://insights.sbomify.com/MAL-2025-5953/): Malicious code in scenes-ml-app (npm) (malicious package)
- [MAL-2025-59529](https://insights.sbomify.com/MAL-2025-59529/): Malicious code in wibowo-takokak18-sukiwir (npm) (malicious package)
- [MAL-2025-59528](https://insights.sbomify.com/MAL-2025-59528/): Malicious code in wibowo-taiwan82-sukiwir (npm) (malicious package)
- [MAL-2025-59527](https://insights.sbomify.com/MAL-2025-59527/): Malicious code in wibowo-tahutek70-sukiwir (npm) (malicious package)
- [MAL-2025-59526](https://insights.sbomify.com/MAL-2025-59526/): Malicious code in wibowo-tahu13-sukiwir (npm) (malicious package)
- [MAL-2025-59525](https://insights.sbomify.com/MAL-2025-59525/): Malicious code in wibowo-sroto10-sukiwir (npm) (malicious package)
- [MAL-2025-59524](https://insights.sbomify.com/MAL-2025-59524/): Malicious code in wibowo-soto95-sukiwir (npm) (malicious package)
- [MAL-2025-59523](https://insights.sbomify.com/MAL-2025-59523/): Malicious code in wibowo-sego83-sukiwir (npm) (malicious package)
- [MAL-2025-59522](https://insights.sbomify.com/MAL-2025-59522/): Malicious code in wibowo-sate97-sukiwir (npm) (malicious package)
- [MAL-2025-59521](https://insights.sbomify.com/MAL-2025-59521/): Malicious code in wibowo-sate67-sukiwir (npm) (malicious package)
- [MAL-2025-59520](https://insights.sbomify.com/MAL-2025-59520/): Malicious code in wibowo-sasag10-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/452/